CAPEC Related Weakness
Password Recovery Exploitation
CWE-522 Insufficiently Protected Credentials
CWE-640 Weak Password Recovery Mechanism for Forgotten Password